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Claims 

What is claimed is: 

L A method for parsing of nested electronic mail documents over a computer 
network, the method comprising the steps of: 

retrieving a complaint from a complainant about an incident over the computer 
network; 

parsing the complaint into a plurality of components; 
normalizing one of the plurality of components; and 

performing an analysis protocol on one of the plurality of components to extract 
information relating to the complaint. 

2. The method of Claim 1 , wherein the parsing step includes locating a header in one 
of the plurality of components. 

3. The method of Claim 2, further including the step of locating a header keyword in 
the header, 

4. The method of Claim 3, wherein the normalizing step includes removing one or 
more characters from the header based on the header keyword. 

5. The method of Claim 1, further including the step of locating a Received line in 
one of the plurality of components. 

6. The method of Claim 5, further including the step of validating a source IP 
address from the Received line. 

7. The method of Claim 6, wherein the source DP is validated by locating one or 
more delimiters in the Received line. 
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8. The method of Claim 1, further including the step of categorizing the complaint. 

9. The method of Claim 8, wherein an action is taken by a user based on the 
category of the complaint. 

10. The method of Claim 1, wherein the extracted fields comprise one of a complaint 
tracking code, a source IP address, a Received Line, a First Line, a URL, and a body of 
one of the plurality of components. 

1 1 . The method of Claim 10, wherein the extracted fields form a record of a database. 

12. A method for parsing of nested electronic mail documents over a computer 
network, the method comprising the steps of: 

retrieving a complaint from a complainant about an incident over the computer 
network; 

parsing the complaint into a body and a header; 

normalizing the body and the header of the complaint; and 

extracting specific fields from the body and the header of the complaint using an 
analysis protocol. 

13. The method of Claim 12, further including the step of locating a header keyword 
in header of the complaint. 

14. The method of Claim 13, further including the step of removing one or more 
characters from the header based on the header keyword. 

15. The method of Claim 12, further including the step of locating a Received line in 
the header of the complaint. 
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16. The method of Claim 15, further including the step of validating an IP address of 
a source of the complaint from the Received line. 

17. The method of Claim 16, wherein the IP address of the source of the complaint is 
validated by locating one or more delimiters in the Received line. 

18. The method of Claim 12, further including the step of categorizing the complaint 
to determine an action taken by a user based on the category of the complaint. 

19. The method of Claim 1, wherein the extracted fields comprise one of a complaint 
tracking code from the header of the complaint, an IP address from the header of the 
complaint, a Received Line from the header of the complaint, a First Line from the body 
of the complaint, and a URL from the body of the complaint. 

20. A system for processing a complaint received over a computer network, 
comprising: 

a message parser adapted to break a message into a plurality of message 
components; 

a normalizer for converting at least one of the plurality of message components 
into a common presentation format associated with that message component; and 

an analysis protocol adapted to analyze the plurality of message components by 
way of the common presentation format. 

2L The system of Claim 20, wherein the analysis protocol further includes an 
extractor adapted to isolate specific information of the message in accordance with 
predetermined criteria. 

22. The system of Claim 21, wherein the extractor searches for at least one of an IP 
address, a domain name, and an electronic mail address. 
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23. The system of Claim 22, wherein the extractor identifies an alphanumeric 
character associated with the IP address, the domain name or the electronic mail address. 

24. The system of Claim 20, wherein the message components include a header and a 
body. 

25. A system for processing a complaint relating to a service disruption over a 
computer network, comprising: 

an organization for providing services for a complainant on a computer 

network, 

wherein the organization retrieves a complaint from the complainant relating to 
the service disruption and processes the complaint by parsing the complaint into a 
plurality of components, normalizing the plurality of components, and extracting specific 
fields from at least one of the plurality of components of the complaint. 

26. The system according to Claim 25, wherein one of the specific fields comprises a 
source IP address. 
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